Privacy policy
Last updated · 2026-04-24 · Next review 2026-10-24
What we collect
· Account: email, display name, sign-in method (Email / Google / Apple) · Chart input: date, time, and place of birth (encrypted at rest, used for calculation) · Usage: anonymous charts, report orders, payment status · Device: IP, user agent, referrer (for abuse prevention and analytics) · Waitlist: email + locale preference (for product updates, unsubscribe anytime)
How we use it
· Provide chart calculation and report generation · Send order confirmations, report-ready notifications, and key product updates · Improve the product (aggregate analytics — not identifying) · Prevent abuse (Turnstile human-check) We do NOT: · Sell or rent your data · Run cross-device ad tracking · Use your data to train AI models (our AI reports call third-party APIs; they do not train on your prompts)
Third-party processors
· Vercel (US) — hosting · Supabase (SG / US) — database and storage · Creem — hosted payments (card numbers never touch our servers) · Cloudflare (US) — email delivery, CDN, and Turnstile abuse prevention · DeepSeek / OpenAI / Anthropic (depending on provider config) — AI report generation Each has its own privacy policy and SCCs. Transfers follow EU SCCs + PIPL standard contracts.
Cookies & local storage
· wx-locale — remembers your language choice (1-year TTL) · session — Better Auth session (HttpOnly + Secure + SameSite=Lax) · _turnstile — transient Cloudflare abuse-prevention cookie, cleared after verify No advertising cookies. No third-party tracking pixels.
Your rights
Under GDPR / CCPA / PIPL, you can: · Access — get a copy of your data · Rectify — correct inaccuracies · Delete — remove your account and all linked data (irreversible, completed within 30 days) · Portability — export as JSON / CSV · Object / restrict — opt out of analytics or marketing emails Exercise these in settings under 'Account & privacy', or email privacy@wenxing.app.
Retention
· Account data — kept while your account is active; hard-deleted within 30 days of account deletion · Payment records — retained for 7 years per accounting rules (metadata only, no card numbers) · Logs / analytics — 90-day rolling window after aggregation · Waitlist emails — until you unsubscribe
Children
Wenxing is for users aged 16 and older. We do not knowingly collect data from children under 16. If we have, please contact us for immediate deletion.
Changes
Material changes are announced via email to registered users. Minor edits (typos, links) only bump the 'Last updated' line at the top of this page.